CWE-1004 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-1004/ Sun, 26 Feb 2023 06:32:51 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-1004 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-1004/ 32 32 CVE-2019-25091 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-25091/ Sun, 26 Feb 2023 06:32:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-25091/ A vulnerability classified as problematic has been found in nsupdate.info. This affects an unknown part of the file src/nsupdate/settings/base.py of the component CSRF Cookie Handler. The manipulation of the argument CSRF_COOKIE_HTTPONLY leads to cookie without ‘httponly’ flag. It is possible to initiate the attack remotely. The name of the patch is 60a3fe559c453bc36b0ec3e5dd39c1303640a59a. It is recommended […]

The post CVE-2019-25091 appeared first on CVE Vulnerability.

]]> A vulnerability classified as problematic has been found in nsupdate.info. This affects an unknown part of the file src/nsupdate/settings/base.py of the component CSRF Cookie Handler. The manipulation of the argument CSRF_COOKIE_HTTPONLY leads to cookie without ‘httponly’ flag. It is possible to initiate the attack remotely. The name of the patch is 60a3fe559c453bc36b0ec3e5dd39c1303640a59a. It is recommended to apply a patch to fix this issue. The identifier VDB-216909 was assigned to this vulnerability.

The post CVE-2019-25091 appeared first on CVE Vulnerability.

]]> CVE-2021-34563 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-34563/ Thu, 23 Feb 2023 14:10:16 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-34563/ In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie. This allows the cookie’s value to be read or set by client-side JavaScript.

The post CVE-2021-34563 appeared first on CVE Vulnerability.

]]> In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie. This allows the cookie’s value to be read or set by client-side JavaScript.

The post CVE-2021-34563 appeared first on CVE Vulnerability.

]]>